well i restored the bad files that way, i could check where they where, the trojan i have is removed by spysweeper but its is getting back, worse is that trojan is on the root of the puter, so i have to be carefull with what i removed, in hijjack this, it wont show, i have to look in run. cmd, regedit.....dohhhh i have to be carefull with what i remove, i did remove my viruscanner, because it looked the trojan was in there in one of the files, that could explain why my viruscanner didnt show up when i start the puter, in google i only find 5 or 7 postings abut this one, but i hav some help again from a dutch board....grin i am driving them crazy already for 3 weeks, but they still try to help me........i love those guys:)

OK this almost makes me consider letting it infect my comp to check if i can remove it in less than 2 hours. :D
My aunt calls me for help everytime her machine gets a trojan/browser hijacker and i always deal with it at a distance this way:
1. I let it infect one of my bootable hdds (i have 3 in my computer now, the other 2 disconnected physically to protect important data).
2. I make a screenshot of every step needed to cure the infection.
3. After everything is clean again my aunt gets an email with a nice illustrated step by step trojan removal procedure.

stuveltje, I still think you should post a HijackThis! log if you want help, otherwise all you will get will be "guess you should do this or that".

yes i will put a hyjack thing up, we did remove and fixed alot of things in those 3 weeks, my moron hubby had only 7 kind of trojans in his puter, only the trojan backdoor coworg is bugging the puter now, but it will only show up if i put on the system restore button, i have checked google, norton sees it and it say it removes it, but next time it will be in the puter again, i will also put up the spysweeper log, because that one sees it also and shw where it is all the time, its somewhere in the root of the puter. i will post tomorrow the hijack thing and all.

Turn off system restore for all drives.
Manually delete everything in c:\System Volume Information\ (iirc you may have to boot in safe mode to do that)
[edit]Just deleted all snapshots manually in Total Commander in protected mode without any trouble.[/edit]

and...

presto ! all your troubles are gone ! ;)

Na i did it otherwise now, what i didnt check was: if the scan system restore was clicked at spysweeper, so everytime spysweeper saw the sucker but couldnt remove it, now what i did was: go in save mode: left the system restore on, run spysweeper with ofcourse the scan system restore on. So spysweeper could remove it now, that way i could connect the net with firefox but now with ie, now i have reinstal internet explore thru the disk , restarted and all is working again, yeahhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh i mnaged after so mnay weeks, and i didnt have to whip all out and reinstal again, Stu <----shking her booty here:D

Congrats Stu |thumb

You are a tenacious one |bow|

I would have thrown in the towel and re-installed long ago.

well normal i would do the same, i would have thrown the damn thing thru the window the same day:D, but its shows when you get older you also gonna be more patience (if thats the word) and since i manage to deal with it almost 4 weeks........it means i am already very old|cry| |shocking| but i have learned alot about the programs in the puter:D